From f05361ce1dd96292e9dcf6133672b1b50ea9648f Mon Sep 17 00:00:00 2001 From: Timothy Date: Mon, 4 Mar 2024 01:23:48 +0800 Subject: [PATCH] feat: add Dockerfile and workflow (#1) * chore: add Dockerfile * chore: update Dockerfile * feat: add docker image CD workflow --- .github/workflows/docker-image.yml | 43 ++++++++++++++++++++++++++++++ Dockerfile | 27 +++++++++++++++++++ 2 files changed, 70 insertions(+) create mode 100644 .github/workflows/docker-image.yml create mode 100644 Dockerfile diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml new file mode 100644 index 0000000..ee79237 --- /dev/null +++ b/.github/workflows/docker-image.yml @@ -0,0 +1,43 @@ +name: Docker Image CD + +on: + push: + tags: + - '*' + +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Get git tag + id: tag + uses: dawidd6/action-get-tag@v1 + with: + strip_v: true + - name: Set up QEMU + uses: docker/setup-qemu-action@v2 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v2 + - name: Login to DockerHub + uses: docker/login-action@v2.0.0 + with: + username: ${{ secrets.DOCKER_USER }} + password: ${{ secrets.DOCKER_PASSWORD }} + - name: Login to GitHub Container Registry + uses: docker/login-action@v2.0.0 + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ github.token }} + - name: Build and push the docker image + uses: docker/build-push-action@v3 + with: + platforms: linux/amd64,linux/arm64 + push: true + tags: | + timothyye/knockd:latest + timothyye/knockd:${{steps.tag.outputs.tag}} + ghcr.io/timothyye/knockd:latest + ghcr.io/timothyye/knockd:${{steps.tag.outputs.tag}} + build-args: | + VERSION=v${{ steps.tag.outputs.tag }} \ No newline at end of file diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..5a9821e --- /dev/null +++ b/Dockerfile @@ -0,0 +1,27 @@ +# Use the Rust official image for the build stage +FROM rust:latest as builder + +# Add target for musl +RUN rustup target add x86_64-unknown-linux-musl + +COPY ./knockd /knockd + +WORKDIR /knockd + +# Build your application on the musl target. +# This creates a statically linked executable. +RUN cargo build --release --target=x86_64-unknown-linux-musl + +FROM alpine + +# Install iptables +RUN apk add --no-cache iptables + +# Create a symbolic link from /sbin/iptables to /usr/sbin/iptables +RUN ln -s /sbin/iptables /usr/sbin/iptables + +# Copy the binary from the builder stage +COPY --from=builder /knockd/target/x86_64-unknown-linux-musl/release/knockd / + +# Command to run +CMD ["/knockd"] \ No newline at end of file